Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/NEcLFSwv26xLnBwyqRu5JPI3kC4.asa
File:                     NEcLFSwv26xLnBwyqRu5JPI3kC4.asa (raw, json)
Hash identifier:          unJYBX+TeFWqDQL6g6ksbM0rdW10f4yITjYBgb1aAak=
Subject key identifier:   34:47:0B:15:2C:2F:DB:AC:4B:9C:1C:32:A9:1B:B9:24:F2:37:90:2E
Certificate issuer:       /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial:       019D8962B3021261743544C6AB699C70FDDC
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/NEcLFSwv26xLnBwyqRu5JPI3kC4.asa
Signing time:             Tue 14 Apr 2026 00:27:20 +0000
ASPA not before:          Tue 14 Apr 2026 00:27:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200825
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Apr 2026 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:89:62:b3:02:12:61:74:35:44:c6:ab:69:9c:70:fd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
        Validity
            Not Before: Apr 14 00:27:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34470b152c2fdbac4b9c1c32a91bb924f237902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:85:49:95:cb:31:70:55:99:7a:07:6c:df:
                    95:91:ca:07:42:4c:37:20:5a:ac:52:5e:75:3d:d7:
                    30:d4:07:fa:40:43:79:30:2c:0c:42:bf:e0:9d:a1:
                    70:b0:0c:b6:16:6f:53:57:c4:8d:30:79:ca:49:70:
                    5f:71:a8:02:41:1f:b5:30:7a:50:98:23:7e:28:25:
                    15:d6:21:43:72:ce:3e:15:16:d2:4e:77:4a:8a:90:
                    18:68:9c:26:f3:fb:f4:45:5e:93:6f:a4:1d:46:fd:
                    97:6c:6d:28:a3:a0:ce:8e:01:86:64:b1:3e:34:7d:
                    07:2c:2e:69:a3:4a:ae:4b:d2:47:29:1c:5e:e6:1c:
                    b5:28:16:ac:c3:94:9e:5a:40:ca:cc:97:a4:58:4b:
                    ad:89:28:58:da:56:1e:02:00:d2:69:09:11:1e:65:
                    15:24:c6:88:0b:db:86:89:52:33:78:6b:8b:a0:00:
                    67:4d:60:55:d4:23:61:ef:23:15:87:ac:03:64:55:
                    65:9b:12:53:88:5a:0c:46:64:96:ad:d4:fa:e3:75:
                    88:20:9d:53:3c:10:3b:aa:8c:fd:36:5e:ca:60:db:
                    9c:b9:4e:45:93:c6:ec:b3:4e:f4:dd:1c:a7:ea:0a:
                    c5:b4:b9:9e:01:3f:a9:7f:fb:6e:2f:36:7b:90:39:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:0B:15:2C:2F:DB:AC:4B:9C:1C:32:A9:1B:B9:24:F2:37:90:2E
            X509v3 Authority Key Identifier:
                keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/NEcLFSwv26xLnBwyqRu5JPI3kC4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200825

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:2d:a9:93:03:fc:8a:a5:7b:d7:5a:29:34:18:c8:39:74:
         4b:32:ac:c5:53:42:53:52:e6:6b:9d:54:ec:57:4e:ee:cc:04:
         8b:fc:df:00:4a:2e:c2:c3:08:27:37:1c:0c:4f:18:02:ce:91:
         9b:ae:81:bf:d1:93:66:b5:76:61:41:b8:12:01:20:6f:59:05:
         b6:c6:4d:87:21:cc:7f:cf:c0:a7:e1:a1:f0:88:00:4b:2a:69:
         56:94:47:53:2b:76:a3:7b:34:9a:8f:52:e0:88:70:a9:bb:fd:
         3b:0a:b3:66:ac:db:57:38:e4:29:6a:a2:59:f6:6a:d3:41:49:
         af:a7:98:51:84:27:f2:be:2b:10:a5:5d:2b:b1:db:7c:ce:13:
         ea:c1:5d:db:2d:3d:a8:ba:be:1f:ba:53:fc:c5:57:b2:78:52:
         d4:13:c0:3a:f6:2e:80:20:ae:67:01:95:7a:52:13:de:de:ea:
         8d:58:e8:4f:ed:a8:f7:0d:aa:ad:db:97:a3:bc:65:c7:47:72:
         a5:e9:4e:20:67:7a:cd:51:1d:45:fb:77:e6:2e:ad:92:8f:19:
         4a:70:df:79:c0:c6:41:14:0b:ea:7c:f0:83:49:e6:b6:8c:b0:
         e7:dd:db:a9:d6:84:99:b2:c3:e4:28:e0:69:a1:fa:92:d8:61:
         f1:bd:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 05:03:08 2026 by rpki-client